Cisco Cisco Web Security Appliance S670 User Guide

 describes the caching options for the Customized Mode option in the 

advancedproxyconfig

 

CLI command.

Would you like to allow 
objects with a heuristic 
expiration time to be served 
as not-modified 
If-Modified-Since hits 
from cache?

Yes, No

(Boolean)

Yes

No

0 = favor freshness on IMS to 
objects with heuristic expiration 
time

1 = favor bandwidth conservation

Would you like to allow 
ETAG mismatch on client 
revalidations?

Yes, No

(Boolean)

No

No

In some cases, the server might 
report different ETags for the same 
version of the same file. This can be 
seen, for example, with clustered IIS 
servers. In these cases, requiring 
both a last modified time (LMT) 
match and an ETag match on client 
revalidations would lead to a lot of 
misses, so it should be sufficient just 
to match the LMT if it is given. 

Note: Setting this to 1 is not 
HTTP-compliant.

Would you like to allow 
caching when requests are 
authenticated by the origin 
server?

Yes, No

(Boolean)

No

Yes

Allow caching for requests 
authenticated by origin server.

Would you like to allow 
caching from servers 
whose DNS results do not 
match the TCP destination 
IP (not trust-worthy and 
applicable only in 
transparent modes)?

Yes, No

(Boolean)

No

Yes

Allow caching from servers whose 
DNS results do not match the TCP 
destination IP.

Enter the Heuristic 
maximum age to cache the 
document with 
Last-Modified Time but no 
actual caching value (in 
seconds):

Time in 
seconds

86400

No

Heuristic maximum age to cache the 
document with LMT but no actual 
caching value.

Enter the Heuristic 
maximum age to cache the 
document without 
Last-Modified Time and no 
actual caching value (in 
seconds):

Time in 
seconds

0

No

Heuristic maximum age to cache the 
document without LMT and no 
actual caching value.